This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/B_2DlHPjFMc2OFdioV78P7kSKnk.roa File: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (raw, json) Hash identifier: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs= Subject key identifier: 07:FD:83:94:73:E3:14:C7:36:38:57:62:A1:5E:FC:3F:B9:12:2A:79 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019B78349EF71775D1894A7DF39BDB621459 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/B_2DlHPjFMc2OFdioV78P7kSKnk.roa Signing time: Thu 01 Jan 2026 06:17:53 +0000 ROA not before: Thu 01 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60485 IP address blocks: 5.157.18.0/24 maxlen: 24 5.157.38.0/24 maxlen: 24 5.157.47.0/24 maxlen: 24 5.157.57.0/24 maxlen: 24 37.72.187.0/24 maxlen: 24 37.203.209.0/24 maxlen: 24 91.108.183.0/24 maxlen: 24 176.61.141.0/24 maxlen: 24 192.40.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9e:f7:17:75:d1:89:4a:7d:f3:9b:db:62:14:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jan 1 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07fd839473e314c736385762a15efc3fb9122a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d6:e6:1b:12:35:e6:b5:65:28:26:6e:82:66: 3a:4e:d9:c1:41:38:cd:01:b3:53:43:50:29:e5:11: ff:42:84:4b:f9:dc:42:6f:fe:b7:fa:1f:4a:26:fd: 2e:77:a4:4f:cd:02:12:2d:44:a1:d5:a0:80:1c:03: e3:6e:3d:7f:9a:50:56:11:11:55:4c:52:37:60:83: 7b:a5:f2:7d:35:ea:7b:85:e9:ec:3c:fc:3f:19:d6: 88:e2:90:2b:bc:f4:14:f2:6b:36:04:5d:05:57:5b: 9e:ac:10:5b:0c:88:d6:ae:96:f7:ee:dd:dc:d2:6f: 81:ed:0a:b5:50:31:1f:c9:13:35:9e:c5:b0:be:24: 7c:a6:fa:fc:78:31:ee:8c:01:f7:a6:89:27:e9:ff: c7:8c:20:ee:55:4f:de:65:91:84:ef:13:00:63:78: 2c:7f:2b:b2:86:2a:d6:fe:fc:37:97:4c:cf:42:14: 67:22:41:9b:21:f6:f0:91:b6:11:a3:75:d8:54:c9: e5:db:71:63:41:5a:be:fe:00:d7:c8:38:ee:13:e0: 55:90:c5:b0:99:3f:16:2d:a7:c3:29:e3:e4:e5:2e: f0:bf:39:7f:f8:dd:4d:58:a8:f9:c5:43:79:9d:c4: 43:53:2a:f1:eb:60:01:a9:9d:00:5a:95:44:ec:02: b1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FD:83:94:73:E3:14:C7:36:38:57:62:A1:5E:FC:3F:B9:12:2A:79 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/B_2DlHPjFMc2OFdioV78P7kSKnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.18.0/24 5.157.38.0/24 5.157.47.0/24 5.157.57.0/24 37.72.187.0/24 37.203.209.0/24 91.108.183.0/24 176.61.141.0/24 192.40.89.0/24 Signature Algorithm: sha256WithRSAEncryption 59:53:6e:7f:60:c1:17:20:f6:d6:27:74:13:f4:fe:f9:fe:50: 7e:28:8a:5d:dc:e5:f7:6f:17:2b:23:d8:b8:4f:f2:0c:0d:2a: 82:e3:d7:66:fe:5e:7a:22:31:5e:ca:61:25:b8:88:62:96:bb: 2c:ab:a3:bf:49:7e:de:b7:b7:ba:44:f4:dc:10:f5:a2:f4:42: 4f:46:5c:bf:0d:e0:c6:37:6c:6f:91:e6:c7:ed:52:19:fd:09: 63:43:78:6f:2d:a6:d2:83:5d:12:7f:d4:74:ba:d4:2c:b7:ca: d6:4d:6c:0a:0c:53:8b:e3:f3:2c:68:49:be:77:91:3f:14:d9: c3:3c:55:d1:35:55:f1:5a:c3:c8:06:e3:6d:77:2d:97:44:c8: 76:ba:b8:2f:43:7c:7f:3c:09:5d:0c:5c:b8:2f:5a:48:99:06: 0d:37:07:c7:f6:57:57:59:68:2b:c0:38:3a:d6:20:b3:84:0f: 57:12:aa:bd:38:7c:ec:9d:ed:d8:51:e5:a9:13:38:1f:47:96: 42:1a:aa:5f:d5:3d:a3:91:10:45:7f:71:8d:f2:19:70:1f:8e: 0a:e5:10:ba:a7:16:1d:66:33:a1:9b:6a:3d:9d:c0:7c:24:85: 79:a3:85:c0:f1:87:9f:d5:56:e7:6b:5e:15:8d:a7:5c:fa:11: 57:bd:a9:ef -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt4NJ73F3XRiUp985vbYhRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMTAxMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2ZkODM5NDczZTMxNGM3MzYzODU3NjJhMTVlZmMzZmI5MTIyYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NbmGxI15rVlKCZugmY6TtnBQTjN AbNTQ1Ap5RH/QoRL+dxCb/63+h9KJv0ud6RPzQISLUSh1aCAHAPjbj1/mlBWERFV TFI3YIN7pfJ9Nep7hensPPw/GdaI4pArvPQU8ms2BF0FV1uerBBbDIjWrpb37t3c 0m+B7Qq1UDEfyRM1nsWwviR8pvr8eDHujAH3pokn6f/HjCDuVU/eZZGE7xMAY3gs fyuyhirW/vw3l0zPQhRnIkGbIfbwkbYRo3XYVMnl23FjQVq+/gDXyDjuE+BVkMWw mT8WLafDKePk5S7wvzl/+N1NWKj5xUN5ncRDUyrx62ABqZ0AWpVE7AKxpQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFAf9g5Rz4xTHNjhXYqFe/D+5Eip5MB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvQl8yRGxIUGpGTWMyT0ZkaW9WNzhQN2tTS25rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQABZ0SAwQA BZ0mAwQABZ0vAwQABZ05AwQAJUi7AwQAJcvRAwQAW2y3AwQAsD2NAwQAwChZMA0G CSqGSIb3DQEBCwUAA4IBAQBZU25/YMEXIPbWJ3QT9P75/lB+KIpd3OX3bxcrI9i4 T/IMDSqC49dm/l56IjFeymEluIhilrssq6O/SX7et7e6RPTcEPWi9EJPRly/DeDG N2xvkebH7VIZ/QljQ3hvLabSg10Sf9R0utQst8rWTWwKDFOL4/MsaEm+d5E/FNnD PFXRNVXxWsPIBuNtdy2XRMh2urgvQ3x/PAldDFy4L1pImQYNNwfH9ldXWWgrwDg6 1iCzhA9XEqq9OHzsne3YUeWpEzgfR5ZCGqpf1T2jkRBFf3GN8hlwH44K5RC6pxYd ZjOhm2o9ncB8JIV5o4XA8Yef1Vbna14Vjadc+hFXvanv -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:41 2026 by rpki-client